PT-2024-11348

CVE-2021-47350

·

Published

2021-07-05

·

Updated

2024-11-04

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The powerpc kernel is not prepared to handle exec faults from kernel. The function is exec fault() returns 'false' when an exec fault is taken by kernel, because the check is based on reading current->thread.regs->trap which contains the trap from user. This leads to a forever minor exec fault because PAGE EXEC is not set and set access flags filter() bails out without setting the PAGE EXEC flag. The issue arises from commit d3ca587404b3 which removed the proper handling of exec faults, introducing a test based on error code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
OESA-2024-1692
OPENSUSE-SU-2024_2185-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2185-1
Found an issue in the description? Have something to add? Feel free to write us 👾